CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
SentinelOne
Stopping PHP2SHELL: How SentinelOne Protects Customers From This Attack Technique
Executive SummaryOn October 21, 2026, the PHP project released versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35 to fix two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated CVSS v4. ...
-
Dark Reading
'PHP2Shell' Bugs Signal Red Alert for Security Industry
4 Min ReadCredit: DSGpro via Getty ImagesA pair of critical vulnerabilities tied to open source scripting language PHP appear to have significant consequences for much of the server infrastructure hol ...
-
The Hacker News
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2 ...
-
Kaspersky
PHP2Shell: How to Protect Your Server | Kaspersky official blog
vulnerabilities PHP developers have released patches for two critical vulnerabilities that could allow an attacker to remotely execute arbitrary code on the server without authentication. Editorial Te ...
-
TheCyberThrone
Oracle October 2026 Critical Patch Update: 1295 Patches Across Products
Oracle released its October 2026 Critical Patch Update (CPU) on 20 October, delivering 1,295 new security patches across its enterprise product portfolio. The update covers Oracle Database Server, E- ...
-
Palo Alto Networks Blog
Millions of PHP Instances Exposed - What Organizations Need To Do Right Now
Two critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619) have been published. Both vulnerabilities carry a severe CVSS score of 9.2 (more technical details are in the Unit 42 Threat B ...
-
The Hacker News
PHP Issues Emergency Patches for Two Critical PHP2Shell RCE Flaws as Exploit Attempts Emerge
PHP has released emergency updates that fix two critical flaws in the language itself, letting an attacker without an account run code on a web server. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and ...
-
Cloudflare Blog
Cloudflare deploys protections against php2shell vulnerability
Today, Calif.io, Wiz, OpenAI and Quarkslab disclosed two vulnerabilities in PHP, tracked as CVE-2026-109618 and CVE-2026-109619 and known as php2shell. The vulnerabilities affect all web servers runni ...
-
TheCyberThrone
PHP Zero-Day Alert: Critical RCE Vulnerabilities Under Investigation
October 21, 2026Two critical PHP vulnerabilities, tracked as CVE-2026-109618 and CVE-2026-109619, have raised concerns about potential remote code execution (RCE) on vulnerable web servers.Audit Secur ...
-
The Hacker News
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't
You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggeste ...